Access Control

Every one of the 8 is a mark on the map. Named now: 1 to 8, most at risk first.

1. WordPress Duplicate Page or Post <1.5.1 - Cross-Site ScriptingCVE-2021-25075Wpdevart · 1.4% likely

   CWE-862

2. Booking calendar, Appointment Booking System <= 3.2.36 - Missing Authorization to Unauthenticated Arbitrary Modification via wpdevart_payment AJAX ActionCVE-2026-8840wpdevart · CVSS 5.3 · 0.5% likely

   CWE-862

3. WordPress Booking calendar, Appointment Booking System plugin <= 3.2.3 - Broken Access Control vulnerabilityCVE-2023-24407WpDevArt · CVSS 5 · 0.5% likely

   CWE-862

4. WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityCVE-2023-45631wpdevart · CVSS 4.3 · 0.4% likely

   CWE-862

5. Coming soon and Maintenance mode < 3.6.7 - Subscriber+ Arbitrary Email Sending to Subscribed UsersCVE-2022-0164Wpdevart · 0.3% likely

   CWE-862

6. WordPress Booking calendar, Appointment Booking System plugin <= 3.2.36 - Broken Access Control vulnerabilityCVE-2026-57778wpdevart · CVSS 5.3 · 0.3% likely

   CWE-862

7. WordPress Booking calendar, Appointment Booking System plugin <= 3.2.30 - Broken Access Control vulnerabilityCVE-2025-67574wpdevart · CVSS 5.3 · 0.3% likely

   CWE-862

8. WordPress Gallery – Image and Video Gallery with Thumbnails plugin <= 2.0.3 - Broken Access Control vulnerabilityCVE-2024-37542WpDevArt · CVSS 5.4 · 0.2% likely

   CWE-862

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.